Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/2991FB703EBC11F0B4390D6CC4F9AE02.roa
File:                     2991FB703EBC11F0B4390D6CC4F9AE02.roa (raw, json)
Hash identifier:          H6TSFHjxceqzGmdQryqjxQpaN4ogGNNs1wmONNfXYC4=
Subject key identifier:   D1:DA:B4:7E:EC:80:89:FB:5C:58:E4:91:65:A1:10:D5:3F:5D:4A:7E
Certificate issuer:       /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Certificate serial:       2157
Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/2991FB703EBC11F0B4390D6CC4F9AE02.roa
Signing time:             Mon 08 Jun 2026 16:18:42 +0000
ROA not before:           Mon 08 Jun 2026 16:18:42 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     65569
IP address blocks:        2404:b180:1200::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
                          rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8535 (0x2157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
        Validity
            Not Before: Jun  8 16:18:42 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a26eb62-b7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:bc:5a:1c:69:e7:7e:eb:43:ac:ee:3e:bc:
                    c9:87:b9:1b:a4:6d:32:73:47:89:dd:62:61:50:e3:
                    bf:f4:fb:8d:8b:7a:c3:1a:84:dd:9c:90:ce:a8:29:
                    76:6e:41:92:59:57:90:97:f1:47:5e:ea:76:ce:98:
                    ee:ea:e5:33:49:94:15:d8:45:6e:f5:9b:bd:d9:4b:
                    8a:30:d6:ec:d6:1b:6e:cd:d4:50:b4:1c:1e:38:b7:
                    c1:d3:4e:c8:e0:13:65:92:cd:91:6d:79:ae:fc:52:
                    c7:e3:42:e6:bb:38:d5:69:58:9a:fa:f4:cf:d4:45:
                    f0:ac:27:db:4b:cc:eb:b5:13:f1:53:fb:bb:f8:88:
                    b0:61:bf:c6:e0:8a:7e:6c:74:51:be:f7:54:f1:d2:
                    0d:2f:af:95:9b:50:c3:78:02:a1:6c:e7:45:e8:61:
                    a1:2e:56:f8:28:3e:bb:3c:2e:34:56:44:45:ac:df:
                    b0:7f:fd:9d:31:4b:16:54:38:64:f9:a8:73:d2:3f:
                    dc:21:2c:1a:66:4d:03:b8:b2:33:28:1a:59:26:e5:
                    62:e6:bb:df:34:1f:27:36:f0:1a:21:49:03:3b:39:
                    bd:ad:51:65:83:ed:af:87:60:c5:12:86:ea:bf:fd:
                    b9:f3:1b:ef:ab:ac:14:42:ac:69:c3:00:90:08:99:
                    f3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DA:B4:7E:EC:80:89:FB:5C:58:E4:91:65:A1:10:D5:3F:5D:4A:7E
            X509v3 Authority Key Identifier:
                keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/2991FB703EBC11F0B4390D6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:b180:1200::/44

    Signature Algorithm: sha256WithRSAEncryption
         c3:3e:db:f3:22:0b:53:69:fd:ea:87:c2:90:11:19:25:b7:d7:
         bb:af:f1:76:22:53:67:35:13:7a:23:6e:b0:5f:51:35:8e:99:
         80:e9:cd:85:07:6f:72:d0:eb:71:69:7a:72:d9:67:ae:4a:2b:
         d7:5c:b0:30:b3:6a:11:b4:5a:65:79:f1:55:8e:43:80:90:08:
         ac:13:c7:54:85:8d:77:fc:e8:ff:51:20:f7:37:92:37:50:df:
         f7:41:cf:67:f8:11:60:c7:16:d1:c5:6a:3d:54:bb:6b:37:b3:
         a1:29:4e:1a:d0:01:da:93:b4:de:60:07:64:43:29:e5:04:fc:
         34:db:b3:cb:e2:ff:2e:14:69:ef:88:72:91:3d:09:9b:82:6f:
         f2:f9:be:b0:ae:09:ef:98:1a:c0:4c:a4:bc:ff:cd:2f:30:98:
         bc:9a:ca:c9:5d:f8:d0:3f:3d:0a:1d:48:96:b2:82:df:ef:6a:
         b1:d6:d7:5d:6c:71:95:1e:96:88:f8:06:1a:bf:a9:28:ad:21:
         ea:78:8e:d6:6b:38:fe:9a:6c:be:f3:50:81:b1:03:6e:4b:a9:
         f5:3e:ed:f9:73:a3:39:1e:e1:cb:2b:2b:ce:9f:99:5d:f4:5c:
         be:f6:f8:d0:9b:d7:41:87:fa:24:5a:5f:bf:6f:3d:36:5f:e0:
         1a:5b:64:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 17:37:55 2026 by rpki-client